Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa
File:                     3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa (raw, json)
Hash identifier:          0Q7r1d1nJsciNXSetGeUuswude0UdlXTRa2V2Xv1Ig0=
Subject key identifier:   18:3A:06:01:27:66:50:FE:BC:1A:2F:BD:DA:80:36:56:D4:C6:F0:50
Certificate issuer:       /CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
Certificate serial:       6AC717D0F59BB6B9937C4BBB73B76F5F8A4F7AFD
Authority key identifier: 3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa
Signing time:             Thu 12 Oct 2023 19:36:01 +0000
ROA not before:           Thu 12 Oct 2023 19:31:01 +0000
ROA not after:            Thu 10 Oct 2024 19:36:01 +0000
asID:                     270288
IP address blocks:        200.123.232.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c7:17:d0:f5:9b:b6:b9:93:7c:4b:bb:73:b7:6f:5f:8a:4f:7a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72
        Validity
            Not Before: Oct 12 19:31:01 2023 GMT
            Not After : Oct 10 19:36:01 2024 GMT
        Subject: CN=3082010A0282010100B90361622FD97E06E0CB71ED6A4D2398BB342DB8DEAD05F148B8D41CB1AC8040C6E4770C37AEDD7AEBE7BC695D82178A8F3D68F6665A9F73245846674F6FB663B0733D6D8A449AB80C4F2B5CD957025134C7A282AA85913E96D346CD4DE6E4BB87CE11FCA57EE192720BC47CB1A5BC0149CC48F7EEFFC36118E6221E8E3DDCF03C4F00A768CEFB46D693981DF35412AE35E47882C879136404AB7B52C75C2558F5101EE17C3B5B0E17091C659315D5D49D5CF8CEA452973E6F66972F3510E49A82E9D5519D2E6E7233CE891B9597B53A1CF3BEBBB84140A94D3B508BE21F46B6BFF3F3F09AC0D77E24D7C552CA3879EBFCD36296DCD6FFEAE7C5BA374F8F63EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:03:61:62:2f:d9:7e:06:e0:cb:71:ed:6a:4d:
                    23:98:bb:34:2d:b8:de:ad:05:f1:48:b8:d4:1c:b1:
                    ac:80:40:c6:e4:77:0c:37:ae:dd:7a:eb:e7:bc:69:
                    5d:82:17:8a:8f:3d:68:f6:66:5a:9f:73:24:58:46:
                    67:4f:6f:b6:63:b0:73:3d:6d:8a:44:9a:b8:0c:4f:
                    2b:5c:d9:57:02:51:34:c7:a2:82:aa:85:91:3e:96:
                    d3:46:cd:4d:e6:e4:bb:87:ce:11:fc:a5:7e:e1:92:
                    72:0b:c4:7c:b1:a5:bc:01:49:cc:48:f7:ee:ff:c3:
                    61:18:e6:22:1e:8e:3d:dc:f0:3c:4f:00:a7:68:ce:
                    fb:46:d6:93:98:1d:f3:54:12:ae:35:e4:78:82:c8:
                    79:13:64:04:ab:7b:52:c7:5c:25:58:f5:10:1e:e1:
                    7c:3b:5b:0e:17:09:1c:65:93:15:d5:d4:9d:5c:f8:
                    ce:a4:52:97:3e:6f:66:97:2f:35:10:e4:9a:82:e9:
                    d5:51:9d:2e:6e:72:33:ce:89:1b:95:97:b5:3a:1c:
                    f3:be:bb:b8:41:40:a9:4d:3b:50:8b:e2:1f:46:b6:
                    bf:f3:f3:f0:9a:c0:d7:7e:24:d7:c5:52:ca:38:79:
                    eb:fc:d3:62:96:dc:d6:ff:ea:e7:c5:ba:37:4f:8f:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3A:06:01:27:66:50:FE:BC:1A:2F:BD:DA:80:36:56:D4:C6:F0:50
            X509v3 Authority Key Identifier:
                keyid:3A:6A:1D:CB:E3:26:CB:F4:20:17:E0:13:F8:13:5C:8F:6B:E3:BB:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3A6A1DCBE326CBF42017E013F8135C8F6BE3BB72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GyBnmqczSsRQiRTz87AfUSFCPxApJhs5M9ErcSCsMuJ1/0/3230302e3132332e3233322e302f32322d3232203d3e20323730323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4d:f0:00:df:f7:5b:45:e9:62:3a:f7:4b:ef:3e:e1:16:2c:f7:
         ad:10:d9:3d:b9:78:c8:d7:26:11:e3:87:89:16:fb:ee:e0:f7:
         3b:e0:f3:8f:1a:40:00:24:0e:6a:80:eb:30:2b:16:d6:00:eb:
         5c:0d:02:c9:8f:92:80:03:6d:87:82:e6:f6:6a:d4:61:e3:16:
         ce:c3:2e:1a:0f:dd:a1:2d:bb:bd:0a:64:0a:b8:53:a0:14:74:
         51:29:c1:21:b7:31:b9:50:c8:5c:41:84:3b:10:37:54:a5:ef:
         55:af:cb:b5:5d:7f:12:b2:ed:80:88:ec:91:e8:a3:fc:0e:38:
         9a:f8:b6:77:bf:41:53:d0:c7:d6:8e:30:db:20:f9:63:7c:e2:
         6f:cc:1e:0e:9e:e9:70:12:fe:4a:80:86:80:a6:65:57:31:c8:
         cf:49:36:c8:88:a1:66:00:d4:7f:0f:b1:36:e7:36:ba:99:cd:
         f8:47:aa:2e:95:47:51:18:1a:05:50:95:24:83:30:c1:9a:26:
         17:4b:9c:ba:cf:90:54:4a:06:d3:43:65:c4:02:fd:e9:6c:32:
         56:3d:6e:d3:5f:1c:7d:11:16:85:f5:7c:1c:2b:7d:55:61:8a:
         ff:6f:a0:80:66:12:9f:ca:d0:24:69:e0:fd:76:71:5e:38:2a:
         90:35:8a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:33 2024 by rpki-client on console-ams.rpki-client.org